CVE-2020-14829: 
MySQL vulnerability analysis and mitigation

A vulnerability was identified in the MySQL Server product of Oracle MySQL (component: InnoDB), affecting versions 8.0.21 and prior. This vulnerability (CVE-2020-14829) was disclosed on October 21, 2020. The vulnerability affects the InnoDB component of MySQL Server and can be exploited by a high-privileged attacker with network access via multiple protocols (MITRE, NVD).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The attack requires network access and high privileges but is considered easily exploitable. The vulnerability specifically affects the InnoDB component of MySQL Server (NETAPP).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability only affects availability, with no impact on confidentiality or integrity (MITRE).

The vulnerability is considered easily exploitable by an attacker with high privileges and network access through multiple protocols. The attack complexity is rated as Low, requiring no user interaction for exploitation (NETAPP).

Oracle has released patches to address this vulnerability in MySQL version 8.0.22. Ubuntu users should upgrade to mysql-server-8.0 version 8.0.22-0ubuntu0.20.04.2 for Ubuntu 20.04 LTS and version 8.0.22-0ubuntu0.20.10.2 for Ubuntu 20.10 (UBUNTU).